Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection

Ivanti Endpoint Manager Mobile EPMM versions 12.5.0.0 through 12.7.0.0 contain a code injection vulnerability that allows unauthenticated remote attackers to achieve arbitrary code execution on the target system. id: CVE-2026-1281 info: name: Ivanti EPMM =12.7.0.0 - Unauthenticated Code Injection...

CVE-2020-17453-PoC

CVE-2020-17453 WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. PoC Proof of Concept https://.com/carbon/admin/login.jsp?msgId=%27;alert1// Discoverers Name: Jackson Henry Twitter: @JacksonHHax Name: Nicholas Young...

CVE-2020-5902_RCE

CVE-2020-5902RCEEXP Blog: http://www.svenbeast.com/post/cve-2020-5902 Read File Example: https://x.x.x.x/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1 Host: 127.0.0.1 Connection: close...

F5 Admin Interface - Detect

Detects F5 Admin Interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Detects F5 Admin Interfaces.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'F5 Admin Interface - Detect', 'description': 'Detects F5 Admin...

Nuxeo Platform Login Panel - Detect

Nuxeo Platform login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nuxeo Platform login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nuxeo Platform Login Panel - Detect',...

Ivanti Sentry Panel - Detect

Ivanti Sentry panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Sentry panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ivanti Sentry Panel - Detect', 'description': 'Ivanti...

VMware NSX Login Panel - Detect

VMware NSX login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """VMware NSX login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VMware NSX Login Panel - Detect', 'description':...

SecMail Login Panel - Detect

SecMail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SecMail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SecMail Login Panel - Detect', 'description': 'SecMail...

Cisco ServiceGrid Login Panel - Detect

Cisco ServiceGrid login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco ServiceGrid login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco ServiceGrid Login...

Cisco Prime Infrastructure Panel - Detect

A Cisco Prime Infrastructure login panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """A Cisco Prime Infrastructure login panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cisco Pri...

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting Detection

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the key and redirect parameters in login.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. !/usr/bin/env python3 -- coding: utf-8 -- """Yonyou UFIDA ERP-NC V5.""" from...

CVE-2023-40277

An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting XSS vulnerability has been discovered in the login.jsp message parameter...

CVE-2022-26959

There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...

EUVD-2025-37396

A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely...

CVE-2025-12547: Improper Restriction of Excessive Authentication Attempts

A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely...

LogicalDOC Community Edition security vulnerabilities

LogicalDOC Community Edition is a documentation system from LogicalDOC Italy. A security vulnerability exists in LogicalDOC Community Edition 9.2.1 and earlier versions, which stems from an improperly restricted authentication attempt in the file /login.jsp, which could lead to a remote brute-for...

EUVD-2010-0742

Malware in sbrugna...

EUVD-2022-31503

Malicious code in bioql PyPI...

CVE-2020-17453

WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter...

Yonyou UFIDA ERP-NC /login.jsp file cross-site scripting vulnerability

Yonyou UFIDA ERP-NC is a kind of Enterprise Resource Planning ERP software, which is mainly used for financial management, supply chain management, production management and customer relationship management of enterprises. Yonyou UFIDA ERP-NC suffers from a cross-site scripting vulnerability that...